Received: (at 70243) by debbugs.gnu.org; 5 Jun 2024 17:10:51 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jun 05 13:10:51 2024 Received: from localhost ([127.0.0.1]:49869 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1sEu9y-0002px-B0 for submit <at> debbugs.gnu.org; Wed, 05 Jun 2024 13:10:51 -0400 Received: from mail-wr1-f52.google.com ([209.85.221.52]:38849) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <zimon.toutoune@HIDDEN>) id 1sEu9w-0002p1-CY for 70243 <at> debbugs.gnu.org; Wed, 05 Jun 2024 13:10:48 -0400 Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-35e4f079a35so550077f8f.3 for <70243 <at> debbugs.gnu.org>; Wed, 05 Jun 2024 10:10:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1717607368; x=1718212168; darn=debbugs.gnu.org; h=mime-version:message-id:date:references:in-reply-to:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=5svpOT2Fq1Zoh0QCPhuKpXAhhPdJw4XlxFZAGznYH2c=; b=mArvcgCmNKanu86EIbKYtKBE4j43RSK/XW+4EP3A8lqBq+aPxOP4K4Ly/X4q8AjEYu F/ZCCDa1mWTkJgZu/l4TajaoI5DnE58Z4sgc2uprHDu84Vl2r58gsoOSPI9vEvlP6xbE osUyrNfY3RxF4LHsNJgpOrQ/SZ30Hzp930juhTL/lUXg2jGUtif+meKE5RKSxSqr4Srr ekAHGkKy+lVbByGkow6c/lmK3iX7WqM6nnbYouo3SH+NOoHqznS1ExKd3UU0UVL0ZCn8 hDd6zjJ/8ejNNfn6n2Uj5z+0KEnTY09LYDRta8EN8H2pnEQ808E0tk7zuXqrDSK0cuYc A/lQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1717607368; x=1718212168; h=mime-version:message-id:date:references:in-reply-to:subject:cc:to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=5svpOT2Fq1Zoh0QCPhuKpXAhhPdJw4XlxFZAGznYH2c=; b=SomJJlD5qhZP7PlfSf3WYiv+toLw7P2JsCgm48FWT61xzbQMwA0J12xKBibsMLY0Oz 7FWEc/72sLBeU2xChgP9yG/WjxpWQsLpUfGefRTlS9sZMh8N8gPcmqEhGN7RT+cpCl16 IArdSY2ds7ahvEK48FqeRJH+x7xp591jVdf6mLKJkSkmeDYN/FqfjEPEDU3+mX1+iYDo /QHxCVNpqaMoy9SzzMmVwCxLCf4a91bGOcyKkip0K+EaC+UAiv5Vs715fsNsKgbOP9BE tnCzmDVZabCxvyXdkgMTFDRficlPOTG/K4UiIsBNg3K50nD8C873QkIjzv4LaAARmBqj QRkA== X-Gm-Message-State: AOJu0Yze9MkiNGawkoC9wVI5lAC2g4OzePliyFIZGY43OJdP5lBVyFpT j5yICgPaboUFpxOoOsqjnRM7Go+a6OMaGIEYXFGI7jHbjTqXUIcRyk8eLg== X-Google-Smtp-Source: AGHT+IEIsCmEfLXyv8f0/wMeWVVxtqYjDMJtQ2KFdwRD/wQy1w06YS0O849ojYNy41kOjr4yEo0G9A== X-Received: by 2002:a5d:40cf:0:b0:354:e03c:b39a with SMTP id ffacd0b85a97d-35e8ef93c17mr2145318f8f.6.1717607368391; Wed, 05 Jun 2024 10:09:28 -0700 (PDT) Received: from lili (roam-nat-fw-prg-194-254-61-41.net.univ-paris-diderot.fr. [194.254.61.41]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-35dd04d9424sm15254798f8f.50.2024.06.05.10.09.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 05 Jun 2024 10:09:27 -0700 (PDT) From: Simon Tournier <zimon.toutoune@HIDDEN> To: Ludovic =?utf-8?Q?Court=C3=A8s?= <ludo@HIDDEN>, Leo Famulari <leo@HIDDEN> Subject: Re: bug#70243: The substitute authorization warning is displayed when it shouldn't be In-Reply-To: <87v8322q5v.fsf@HIDDEN> References: <ZhF9KvWEBpJ11r-D@HIDDEN> <87v8322q5v.fsf@HIDDEN> Date: Wed, 05 Jun 2024 19:06:05 +0200 Message-ID: <87r0dbmi9u.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 70243 Cc: 70243 <at> debbugs.gnu.org X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, On Sat, 25 May 2024 at 11:31, Ludovic Court=C3=A8s <ludo@HIDDEN> wrote: >> But, I do have the given key in my '/etc/guix/acl', and this works: > > Are /etc/guix/acl and /etc/guix world-readable? I had been bitten by this recently. And I have not found any mention about that in the manual. Maybe it could helpful to add: --=-=-= Content-Type: text/x-diff Content-Disposition: inline; filename=p.patch Content-Description: p.patch diff --git a/doc/guix.texi b/doc/guix.texi index 5e1173b8c6..3b97674733 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -3792,7 +3792,8 @@ Getting Substitutes from Other Servers @end example Again this assumes @file{key.pub} contains the public key that -@code{guix.example.org} uses to sign substitutes. +@code{guix.example.org} uses to sign substitutes. Make sure +@file{/etc/guix/acl} is world-readable. @end enumerate Now you're all set! Substitutes will be preferably taken from --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable In addition, I had to be read a comment in source code to know what another issue was: the daemon=E2=80=99s too old. Hence, I would suggest: --=-=-= Content-Type: text/x-diff Content-Disposition: inline; filename=pp.patch Content-Description: pp.patch diff --git a/guix/scripts/weather.scm b/guix/scripts/weather.scm index 08a1b22a74..98a09f9e9a 100644 --- a/guix/scripts/weather.scm +++ b/guix/scripts/weather.scm @@ -643,7 +643,7 @@ (define-command (guix-weather . args) ;; substitute URLs, presumably because it's too ;; old. (warning (G_ "using default \ -substitute URLs~%")) +substitute URLs; maybe the daemon's too old~%")) %default-substitute-urls))) (systems (match (filter-map (match-lambda (('system . system) system) --=-=-= Content-Type: text/plain Both would ease the debugging session of substitute authorization, IMHO. Cheers, simon --=-=-=--
bug-guix@HIDDEN
:bug#70243
; Package guix
.
Full text available.Received: (at 70243) by debbugs.gnu.org; 25 May 2024 09:32:13 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Sat May 25 05:32:13 2024 Received: from localhost ([127.0.0.1]:42361 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1sAnl7-000553-0l for submit <at> debbugs.gnu.org; Sat, 25 May 2024 05:32:13 -0400 Received: from eggs.gnu.org ([209.51.188.92]:57876) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <ludo@HIDDEN>) id 1sAnl5-00054u-Es for 70243 <at> debbugs.gnu.org; Sat, 25 May 2024 05:32:12 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <ludo@HIDDEN>) id 1sAnks-0003wl-HJ; Sat, 25 May 2024 05:31:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=o48eEt/c4204LYsB0Czd7KQrplXQfF2WKR02TlObnN8=; b=H+wzuADn/d9nYlR7XpM2 qx2MEkzWUkufvQL5z/05Gcy33E/eY1zTiJ4rdUj7hZzGsVvBqouDVMHfBe6/ZN5WrQZBWTc1PfEmu RhVBvxpl6axGe13NjBYRUoj8whgoN5A8JpNw7taapLJBnQv1ri7nog+rUhs6Gx36ET1A/CdbFSvSk QNPLY415JsufoBhAC+LAB1UHna6qRU4N9zbOosb1J5Zs8QxxeCqkU3+8MoJVhjDkqAEPm31YozwnG 28H8OmhpL4wjq+GnV7F/N2LFVodm7DjO0b+rP0/OeeKZ/xqQqhXnZG+wjuvPwVAosQ4ZW99UhtHj5 1VcYclbAuZbMhg==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN> To: Leo Famulari <leo@HIDDEN> Subject: Re: bug#70243: The substitute authorization warning is displayed when it shouldn't be In-Reply-To: <ZhF9KvWEBpJ11r-D@HIDDEN> (Leo Famulari's message of "Sat, 6 Apr 2024 12:49:46 -0400") References: <ZhF9KvWEBpJ11r-D@HIDDEN> Date: Sat, 25 May 2024 11:31:56 +0200 Message-ID: <87v8322q5v.fsf@HIDDEN> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 70243 Cc: 70243 <at> debbugs.gnu.org X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -3.3 (---) Hi Leo, Leo Famulari <leo@HIDDEN> skribis: > I just saw this on Debian: > > ------ > $ guix shell -D guix -- ./pre-inst-env guix weather linux-libre > computing 1 package derivations for x86_64-linux... > looking for 1 store items on https://ci.guix.gnu.org... > guix weather: warning: substitutes from 'https://ci.guix.gnu.org' are una= uthorized > hint: To authorize all substitutes from `https://ci.guix.gnu.org' to be d= ownloaded, the following command needs to be run as root: > [...] > ------ > > But, I do have the given key in my '/etc/guix/acl', and this works: Are /etc/guix/acl and /etc/guix world-readable? =E2=80=98check-narinfo-authorization=E2=80=99 in (guix scripts weather) is = supposed to properly handle this case, but I think that fails if /etc/guix is not accessible. Thanks, Ludo=E2=80=99.
bug-guix@HIDDEN
:bug#70243
; Package guix
.
Full text available.Received: (at submit) by debbugs.gnu.org; 6 Apr 2024 16:50:14 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Sat Apr 06 12:50:13 2024 Received: from localhost ([127.0.0.1]:40855 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rt9F7-000800-JH for submit <at> debbugs.gnu.org; Sat, 06 Apr 2024 12:50:13 -0400 Received: from lists.gnu.org ([2001:470:142::17]:42312) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <leo@HIDDEN>) id 1rt9F5-0007zl-QK for submit <at> debbugs.gnu.org; Sat, 06 Apr 2024 12:50:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <leo@HIDDEN>) id 1rt9Eu-0003bX-27 for bug-guix@HIDDEN; Sat, 06 Apr 2024 12:50:00 -0400 Received: from out5-smtp.messagingengine.com ([66.111.4.29]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <leo@HIDDEN>) id 1rt9Es-0004px-2b for bug-guix@HIDDEN; Sat, 06 Apr 2024 12:49:59 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 492435C0066; Sat, 6 Apr 2024 12:49:54 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Sat, 06 Apr 2024 12:49:54 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:content-type:date:date:from:from:in-reply-to :message-id:mime-version:reply-to:subject:subject:to:to; s= mesmtp; t=1712422194; x=1712508594; bh=CQhqn+8K13IYn9XzFaUwcDDGL d5/NtVK0OfNy/gq8hk=; b=00poVGjemkllU5lAO7ts0XGnYiBo0OiSwsE/TIPjg u8Zu91kt5TRRZLhV06mRyatVhpvDNH6jijCYczZJrzUbmsrm+Da9XzUakUBRxcuK CPYI/wqBo6MV2Voo4EydPg94ZiLH8fN3ONCzQlr42pM3nuBpWUEDIf0BssrOGZe2 H8= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1712422194; x=1712508594; bh=CQhqn+8K13IYn9XzFaUwcDDGLd5/NtVK0Of Ny/gq8hk=; b=LWKakyhXdoQt5TqtCHIj5+PenQEA1bRsGz3b497IhQmilYavWxq 0lzOijY4riI8VyKaav2FLvYhZwfwNrqIe+iJN3/GoVAyQLF1eEV8ktLRPDAWW/Zz tExleqW3KegAv53nrXggXjpG1RoRGODN+rIhNVUwuObAxNRVXDLKk+mxFp5qb8Ud v02CNIh/ucavk82opCNEuceNqOr1l5Bs+2xX13nE+JbSGk6Dkr3SVm4G1lpCXOg5 TEBJsbHdS7kVpiPS2trbanlRfdULLsJ3Rc0g332zDWA3WcsD85iClQLb2j37x/z2 lDXBsbmJOLnDg9MC/xzo6f5JGGQs54Kngqg== X-ME-Sender: <xms:Mn0RZmGplrZxbx2ueViuHkC0xciF1KofSWxjSaAnz0TtSM_b3vcfxQ> <xme:Mn0RZnVgtaUWGAnA6JVLlo0oKN49H68iEObzFdhWkf0oj3BrYXXKsM7iVRspMiKpi 21owIKOlB9JgNMkzA> X-ME-Received: <xmr:Mn0RZgKIH9wS7l_04J7Teo42iEiV93iDGaFJuOLOA_FC0neutV5tACSP-AmMPuN3uGpv10vnmw91xCsYgpUsI5petnERyv4> X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrudegvddguddtiecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfggtggusehttdertd dttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeeuieduieejudffvdfhjedvgedvhefggf ejvdevkeeffeelfeekueeijeduveetudenucffohhmrghinhepghhnuhdrohhrghenucev lhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrg hmuhhlrghrihdrnhgrmhgv X-ME-Proxy: <xmx:Mn0RZgEhWnAhfdGfceS-CIcdZaGnrswryuUleDr5bYlkHumLMvufSg> <xmx:Mn0RZsW3Nlf49MNuoVPESZpON1twyW1575LqPkxi10ASdfRhGk29Wg> <xmx:Mn0RZjPZ6Qt2SNEDFU9hHTno-37nrGwoe707-bt-zL_5l-EDzIraBQ> <xmx:Mn0RZj3eVhPwwnyZeE9Pmza7EBhHBUnddcUA5y0WI5E63UNqebBmCw> <xmx:Mn0RZpgYdeF3xZPOVxDBywjWcprBs0qvNZmVZSdOfiZuyiBGfpHWlanfnJEh> Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <bug-guix@HIDDEN>; Sat, 6 Apr 2024 12:49:53 -0400 (EDT) Date: Sat, 6 Apr 2024 12:49:46 -0400 From: Leo Famulari <leo@HIDDEN> To: bug-guix@HIDDEN Subject: The substitute authorization warning is displayed when it shouldn't be Message-ID: <ZhF9KvWEBpJ11r-D@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Received-SPF: pass client-ip=66.111.4.29; envelope-from=leo@HIDDEN; helo=out5-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.1 (/) I just saw this on Debian: ------ $ guix shell -D guix -- ./pre-inst-env guix weather linux-libre computing 1 package derivations for x86_64-linux... looking for 1 store items on https://ci.guix.gnu.org... guix weather: warning: substitutes from 'https://ci.guix.gnu.org' are unauthorized hint: To authorize all substitutes from `https://ci.guix.gnu.org' to be downloaded, the following command needs to be run as root: [...] ------ But, I do have the given key in my '/etc/guix/acl', and this works: ------ guix shell -D guix -- ./pre-inst-env guix build linux-libre substitute: updating substitutes from 'https://ci.guix.gnu.org'... 100.0% substitute: updating substitutes from 'https://bordeaux.guix.gnu.org'... 100.0% 114.0 MB will be downloaded: /gnu/store/547y21y3w9nj29w9n73gp2arjxgmvvl6-linux-libre-6.8.2 substituting /gnu/store/547y21y3w9nj29w9n73gp2arjxgmvvl6-linux-libre-6.8.2... [...] ------ So, the warning is mistaken. For your reference: ------ guix shell -D guix -- ./pre-inst-env guix describe Git checkout: repository: /home/leo/work/guix/ branch: master commit: 50a72a08af37557575199b56bbee9f334d58575a ------ Let me know if there is any other information I can provide.
Leo Famulari <leo@HIDDEN>
:bug-guix@HIDDEN
.
Full text available.bug-guix@HIDDEN
:bug#70243
; Package guix
.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.